Live data from Hacker News

What are your most used self-hosted applications?

noted.lol

431–440 of 456 posts

Re: What are your most used self-hosted applications?

#432

Earlier quoted context omitted.

docker is very bad for security due to its large attack surface.

Using container features to limit access of a program to the broader machine (disk, network, other processes) seems like it would tend to be more secure than... not doing that. Right? It's not as if I'm exposing any docker remote-control-related stuff to the network.

No. What you are thinking about is sandboxing, which is not docker's main objective and can be done with many better tools like firejail.

docker adds its own daemon that creates additional attack surface that you would not have otherwise.

Re: What are your most used self-hosted applications?

#433

Listing the docker images. All this is hosted on a 45 Drives unraid server. adguard/adguardhome - Blocks ads on devices that don't support ad block extensions charlocharlie/epicgames-freegames - Bot that will automatically "purchase" free games from the epic game store. I have it setup to telegram me a link to enter the captcha. chuckmacdev/adrfinder - Checks for Disney dining reservations and emails a link to reserv…

Why Disney dinner reservations specifically?

Re: What are your most used self-hosted applications?

#434

These are the applications I personally host. My home server: - Nextcloud It is my family's main cloud platform, with a 4TB nas HDD. I run it with PHP opcahe enabled and nginx caching to speed it up. And since its local, the upload/download speed is unmatched. - Nginx proxy manager(NPM) and Portainer For NPM its easy and simple to maintain, and the WebUI makes it easy for someone else to change settings Its mostly th…

I recently tried out netmaker. On mobile it just uses wireguard, but it is not mesh at that point; only Linux/Mac/windows nodes are fully mesh.

No post body was provided.

Re: What are your most used self-hosted applications?

#435

Self-hosting is still way too hard. Running your own Plex server on an old laptop shouldn't be any more difficult or less secure than installing an app on your phone. Folks shouldn't have to understand DNS, TLS, HTTP, IP addresses, ports, NAT, CGNAT, port forwarding, etc in order to run a server application on their own hardware. I think we can build usable abstractions around most of it, while being secure by defaul…

Plex server has Windows version. If you use Windows, it's just like installing an app on Windows. The only thing is you need to setup port forwarding for remote access.

Re: What are your most used self-hosted applications?

#436
post #332

Earlier quoted context omitted.

Not the OP but I run a Minio instance in my homelab. It's not in HA-mode but is on a VM that is replicated across my 3 proxmox nodes. I just use a simple docker-compose file (17 lines) and haven't run into any issues yet.

Very neat! If you lose a node, are you guaranteed to be able to recover from the other two? Are those VMs running on the same host?

I have three physical nodes (Dell micro-PCs) and the VM will automatically failover if one node is lost. It's not quite instant but meets my requirements fine.

Re: What are your most used self-hosted applications?

#437

Asking for advice:(to HN of all places but eh...) I know nothing about docker. I have a handful of VMs(Jitsi, pfsense,VPN). Want to be able to set up useful self-hosted services at home without killing my family downtime. My current plan: yunohost https://yunohost.org/ and a RPi4 to see the possibilities. Then if I see a rock solid requirement maybe go for something more specific. (NixOS config seems interesting...)…

I’d go with a tinymicro server instead and use proxmox with VMs and LXC containers. This type of containers is pretty much like a VM (you get a full OS and can hardly tell the difference with a VM, unlike docker). But it’s much lighter (it’s a container) and all your regular tooling like ansible etc works out of the box. Along with tarsnap or borg for backups and unattended-upgrades and it’s near set and forget (unli…

A sibling comment convinced me on tinymicro! Thanks for the seconding this!

I was hoping to keep things simple. To start with. Docker+compose on a linux image seems like only "one" system to learn and there seems to be a whole library of prebuilt docker images for most services I could want to run.

Not sure how well the "image library" translates to proxmox.

Also not sure how the Trust(images from online source) Vs Capability (roll my own secure image) balance works out.

Well, nothing says I have to keep proxmox forever so I will try it out and go from there. Thank you for your time!

Re: What are your most used self-hosted applications?

#439
post #134

Earlier quoted context omitted.

Could you please go into more detail regarding "a full little identity provider and authenticating proxy"? Does nginx-proxy-manager do something like SSO?

It does, there's a whole user management and permission model. Check the screenshots, there isn't much written in the docs: https://nginxproxymanager.com/screenshots/ It doesn't do SSO with SAML, OIDC, etc. like more heavyweight solutions. It's basically just a database of users (not even LDAP, it's all internal) who you grant access to proxied apps. Internally it just uses nginx's forward auth proxy support to do al…

Thanks!

I already have it running, I just had no idea it could do that. Guess I know what I'll do on the weekend :)

Re: What are your most used self-hosted applications?

#440

Earlier quoted context omitted.

I am out of the loop. What is “*arr”?

A collection of tools to help you get the media you probably paid too much for anyway but didn't get since Netflix and the rest never got the message that the reason why Spotify works even if it costs more than a CD a month is because everything is there. Netflix today is just mockery, at least in Europe. That said, I don't pirate, mostly because I believe in law and order. But I certainly won't report anyone else fo…

> mostly because I believe in law and order.

Everyone believes in law and order. There are pirates who believe in law and order more than you, inevitably. It's not a justification to not pirate.

Post reply on HN